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Intel Corporation 

Amendments to the Specification : 

Please replace the paragraph beginning at page 3, line 21 
with the following amended paragraph: 

Whenever a private IP address is allocated from DHCP 
server 40 (i.e., a private IP address is assigned to a new 
access request) , policy server 38 retrieves the appropriate 
application layer ACL for the access request and generates a 
corresponding network layer ACL. Policy server 38 then sends 
the generated network layer ACL to each network device, such as 
router 34, and also to each application server 36a-36n that 
supports network layer packet filtering. Policy server 38 also 
sends the retrieved application layer ACL to those servers 36a- 
36n that do not support network layer packet filtering. As each 
ACL is received by a network device or computer system in 
net - woap te -a - fr private network 30 , the ACL is "installed" by that 
device or computer system, and then used to determine whether to 
allow or deny access to a received user access request , as will 
be explained. Please note that the ACL retrieval, generation 
and installation is performed before the allocated private IP 
address is sent to firewall computer 32, 
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